F5 Agility Labs - Index

Welcome

F5 Application Security Manager (ASM), Advanced WAF, and DDoS Hybrid Defender products all include advanced functionality for defending L7DoS attacks. In this self-paced lab, attendees will have an opportunity to explore one component of the overall feature set, L7 Behavioral DoS (BaDOS), leverage BaDOS to mitigate various L7DoS attacks, and examine the built-in reporting and monitoring functions provided by ASM. At the conclusion of the lab, the attendee will have comfort in the basics of BaDOS, how the feature is deployed, and the types of attacks it can be used to mitigate.

Contents:

• 1. Getting Started
  • 1.1. Lab Topology
  • 1.2. Lab Components
  • 1.3. Accessing Lab Environment
• 2. Base Configuration and Traffic Baseline
  • 2.1. Set up the DoS profile
  • 2.2. Create a DoS Logging Profile
  • 2.3. Add the DoS profile to a virtual server
  • 2.4. Create XFF-Mixed_Attacker iRule
  • 2.5. Create HTTP Profile to Accept X-Forwarded-For HTTP Header
  • 2.6. Attach iRule and HTTP Profile to Local Traffic Manager Virtual Server
  • 2.7. Generate Traffic to Establish Baseline
• 3. Application Security DoS Profiles
  • 3.1. Review DoS Profile General Settings
• 4. Stress-Based and Behavioral DoS Profile Settings
  • 4.1. Review Stress-Based Dos Profile Settings
  • 4.2. Review Behavioral DoS Settings
  • 4.3. Summarizing Key Points
• 5. Request Signatures
• 6. Bad Actor Detection
• 7. Bad Actor Detection and Request Signatures
  • 7.1. Bonus